Security software and managed IT services for organisations that refuse to compromise on data ownership. Deploy on your infrastructure or let us host it for you. Either way, you own 100% of your data. We never access, mine, or sell it. Enterprise-grade, fully customisable platforms with proactive 24/7 support.
Self-host or SinonTech-hosted. Full ownership. Zero compromise.
Every security platform claims to protect your data. The question nobody answers is who can read it, what leaving costs, and what happens when the vendor has a bad day. Here is where we stand, including when we host it for you.
| Criterion | Self-HostedYour infrastructure | SinonTech-HostedWe run it, you own it | Typical Security SaaSThe category default |
|---|---|---|---|
| Where your data lives | Your hardware, your racks, your region | A dedicated instance, in a data centre you choose | The vendor's cloud, in a region of their choosing |
| Who can read it | You. There is no telemetry channel back to us. | You. Our access needs your approval, and it is logged. | Vendor staff, plus every subprocessor in the chain |
| Getting your data out | It never left. Standard PostgreSQL, your own backups. | Standard formats, on request, at any time. | Proprietary formats, per-GB egress, a fixed export window |
| Air-gapped & OT networks | ✓ Fully supported | ✗ Not applicable — hosting means connected. Self-host for air-gap. | ✗ Impossible — it needs outbound access |
| Changing how it works | Source-level. Your workflows, your schema. | Source-level. Identical to self-hosted. | File a feature request. Wait. |
| If they get breached | Irrelevant — there is no shared tenancy to breach | Your instance is isolated, never pooled | Their breach is your breach |
| Upgrade timing | You choose. Skip a release if it suits you. | Scheduled with you, in your maintenance window. | Forced, on their calendar |
| If the vendor disappears | It keeps running. You hold the binaries. | It keeps running. Move it in-house, no re-platform. | The service ends. One export window, then nothing. |
Both of our options run the same build. Choosing hosting is a decision about who racks the server, not about who owns the data.
Enterprise-grade, fully customisable security platforms that run entirely on your infrastructure. Deploy on bare metal, Docker, Kubernetes, cloud VMs, virtual environments, or air-gapped networks. Every product is self-hosted, open to customisation, and built for organisations of any size.
Full security operations platform with 12 enterprise modules, 93+ UI views, and 6 query languages. UEBA, SOAR, deception fabric, breach and attack simulation, ITDR, OT/ICS monitoring, network forensics, and multi-SIEM federation across Splunk, QRadar, Chronicle, and Sentinel.
Ships with a Standalone Native backend — full feature parity on SQLite alone. All 94 API routes, all 3,132 endpoints, zero external dependencies. Fully customisable per tenant.
Learn More About UmbraUnified MSP and IT security management with 50 features across 9 domains. RMM, EDR, PAM, SOAR, backup and disaster recovery, compliance drift detection, chaos engineering, digital twin simulation, and agentic AI-driven remediation.
White-labelled per client with configurable dashboards, branded portals, custom workflows, and per-tenant feature toggles. Built for MSPs and MSSPs of any size — from solo consultants to large operations.
Learn More About SinonSentinelAll-in-one application security platform with 50+ features across 8 domains. SAST (7 languages), SCA (9 ecosystems), DAST, secrets detection, container scanning, IaC scanning, runtime protection, AI-powered pentesting, and auto-triage with ML-based severity assessment.
Security knowledge graph, PR scorecards, developer champions programme, 30+ integrations, and an AI Security Copilot. Fully customisable per tenant with custom scan policies and triage workflows.
Learn More About UmbraShieldSelf-hosted threat modelling and risk management platform with 44 features across 8 domains. STRIDE threat modelling, attack tree analysis, data flow diagrams, risk registers, compliance mapping (72 frameworks), CI/CD security gates, and AI-driven threat auto-generation.
Attack path visualisation, security posture scoring, real-time collaborative editing, security questionnaires, and document analysis. Fully customisable per tenant with custom threat libraries and playbooks.
Learn More About UmbraRiskSelf-hosted Active Directory and identity platform on Linux — full AD Domain Services, LDAP, Kerberos V5 KDC, NTLM, RADIUS, Certificate Authority, OAuth 2.0/OIDC, SAML 2.0, MFA (6 methods), SCIM, Conditional Access, PIM, and security tiers.
Multi-master replication with USN tracking, domain join for Windows and Linux, AD-compatible schema, Group Policy, Azure Entra ID and AWS Cognito sync. No Windows Server licence required.
Learn More About SinonAuthSecurity awareness training platform with 31 courses, 60+ assessments, phishing simulation, and compliance reporting. Closed-loop training cycle from assessment through remediation to measurable improvement.
Customisable branding, proprietary course uploads, role-based learning paths, and branded certificates. Multi-database support: PostgreSQL, MySQL, MSSQL, or Elasticsearch.
Learn More About SecureMinds AISelf-hosted Git platform with pull requests, CI/CD pipelines, issue tracking, wiki, and 4 package registries (npm, Docker, PyPI, Maven). Built-in security scanning (SAST, secrets, dependencies), branch protection, and 94 API routes.
Multi-tenant with white-label branding, organisations, team hierarchies, role-based access, OAuth2/SAML/LDAP authentication, and 6 deployment modes including air-gapped. Your code never leaves your infrastructure.
Learn More About SinonForgeS3-compatible object storage with 12 enterprise features: access pattern intelligence, immutable audit log, ransomware shield, DLP scanning, compliance vault mode, smart tiering, point-in-time recovery, cross-tenant sharing, object lambda, batch operations, and data sovereignty.
Full S3 API compatibility with presigned URLs, multipart uploads, versioning, lifecycle policies, and bucket replication. Multi-tenant with per-tenant quotas and 6 deployment modes.
Learn More About SinonStoreSelf-hosted unified communications on WebRTC + mediasoup SFU with server-side FFmpeg recording, on-prem Whisper transcription, AI summaries via local LLM, VoIP phone system, contact centre with IVR, virtual office with spatial audio, and persistent chat.
HMAC-chained audit log, DLP, eDiscovery, legal holds, federation with Discord/Teams/Matrix/Slack, per-participant engagement metrics with named badges, and white-label branding per tenant and org unit.
Learn More About SinonMeetSelf-hosted enterprise mail server with 42 features across 8 categories. SMTP, IMAP, POP3, CalDAV and CardDAV implemented natively — plus DKIM signing with automated key rotation, SPF, DMARC, OpenPGP and S/MIME encryption, Bayesian anti-spam, and ClamAV antivirus.
Tamper-evident hash-chained audit log, DLP with document fingerprinting and archive scanning, ransomware scanning, data classification with send restrictions, and Exchange-style transport rules. Migrate from IMAP, mbox, Maildir, EWS, Microsoft Graph or PST. Hierarchical sub-tenants with per-tenant branding and licensing.
Learn More About SinonMailSelf-hosted detection and response platform ingesting from 55 connector types and evaluating 24 rule types — beaconing, impossible travel, DGA, honeypot access, behavioural baselines, and multi-source correlation. Ships 468 starter rules with MITRE ATT&CK coverage mapping.
Imports your ElastAlert2 and Sigma rules with translation-fidelity reporting — it names what would not convert instead of dropping it silently. 35 pre-built actions, GitOps detection-as-code, hunt notebooks, a Test Lab for replaying rules against historical events, and a hash-chained audit log with an independent verifier.
Learn More About SinonAlertSelf-hosted cloud security posture management (CSPM/SSPM) with 30 provider integrations across cloud, SaaS, identity, network appliances, virtualisation and databases. 1,121 built-in checks mapped to 20 compliance frameworks including SOC 2, PCI DSS 4.0, ISO 27001, NIST, CMMC and FedRAMP.
Cross-provider attack-path graph, drift detection, provider-API remediation for AWS/Azure/GCP/GitHub/Kubernetes, hash-chained audit and evidence bundles. Fully customisable per tenant with custom YAML checks.
Learn More About SinonPostureSelf-hosted next-generation firewall spanning L3–L7 from one control plane. Stateful nftables filtering, NAT, Suricata IDS/IPS, nDPI application identification, TLS inspection, four VPN types (WireGuard, IPsec, OpenVPN, SSL-VPN), SD-WAN, and BGP/OSPF routing.
Database-compiled policy with atomic deploy and rollback, GitOps config sync, high availability, DNS/DHCP, WiFi controller and VoIP SBC. Read-only monitoring of third-party firewalls. Multi-tenant with per-tenant encrypted secrets.
Learn More About SinonFirewallSelf-hosted news and open-source intelligence platform ingesting from 9 source families — news APIs, social, RSS, web, chat, documents, email and threat-intel feeds. Per-source and per-article trust and political-bias scoring with a real on-prem NLP pipeline.
Fused cyber threat intelligence: IOC feeds, CVE/NVD sync, MITRE ATT&CK tagging, threat-actor tracking, YARA/Sigma, MISP and TAXII 2 export. Elasticsearch search and alerting. PostgreSQL row-level security tenant isolation.
Learn More About VeritasFeedSelf-hosted remote-access platform combining three VPN protocols (WireGuard, IKEv2/IPsec, OpenVPN) with an identity-aware SSH and RDP/VNC bastion. Session recording, just-in-time access with ephemeral credentials, and a built-in SSH certificate authority.
Live session risk scoring with auto-revoke, inline DLP, per-tenant envelope-encrypted vaulting, OIDC SSO with SCIM and MFA, and a hash-chained audit log with SIEM forwarding. Six deployment modes including air-gapped.
Learn More About SinonVPNEach platform solves a different problem. Find the one that matches yours. Every product below is multi-tenant, white-label, air-gap capable, and deploys six ways.
Select products to compare:
Filter by stage:
| Umbra SIEM Beta | SinonSentinel Soon | UmbraShield Soon | UmbraRisk Soon | SinonAuth Beta | SecureMinds AI Soon | SinonForge Beta | SinonStore Beta | SinonMeet Beta | SinonMail Beta | SinonAlert Beta | SinonPosture Soon | SinonFirewall Beta | VeritasFeed Beta | SinonVPN Beta | |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Purpose | Security Operations | MSP & IT Management | Application Security | Threat & Risk Management | Identity & Access | Security Training | Source Code Management | Object Storage | Unified Communications | Email & Messaging | Detection & Response | Cloud Security Posture | Network Security | News & Threat Intel | Remote Access |
| Target User | SOC Teams | MSPs & MSSPs | AppSec & DevSecOps | Security Architects & GRC | IT Admins & IAM | HR & Security Teams | Developers & DevOps | Platform & Storage Teams | All Staff & IT | IT & Messaging Teams | SOC & Detection Engineers | Cloud Security & GRC | Network & Security Eng | Analysts & SOC | IT & Infrastructure |
| Core Modules | 12 | 50 | 50+ | 44 | 8 services | 6 | 9 features | 12 enterprise | 10 pillars | 42 features | 24 rule types | 1,121 checks | L3–L7 | 9 sources | 3 VPN + bastion |
| API Routes | 94 | 57 | 51 | 37 | 40+ | REST API | 94 | S3 + REST | 40+ | 62 | 72 | 28 | 120 | 84 | 31 |
| Standalone Mode | ✓ (SQLite) | — | — | — | — | — | — | — | — | — | — | — | — | — | — |
| Databases | PostgreSQL + ES | PostgreSQL | PostgreSQL | PostgreSQL | PostgreSQL + Redis | PG / MySQL / MSSQL / ES | PostgreSQL + Redis | PostgreSQL + Redis | PostgreSQL + Redis | PostgreSQL + Redis | PostgreSQL + Redis | PostgreSQL + Redis | PostgreSQL + Redis | PG + Redis + ES | PostgreSQL + Redis |
Self-Hosted Products
Nine security platforms (Umbra SIEM, SinonSentinel, UmbraShield, UmbraRisk, SinonAlert, SinonPosture, SinonFirewall, VeritasFeed, and SecureMinds AI) plus six infrastructure platforms: SinonAuth, SinonForge, SinonStore, SinonMeet, SinonMail, and SinonVPN.
Deployment Modes
Bare metal, Docker, Kubernetes, cloud VMs (AWS/Azure/GCP), virtual environments (VMware/Hyper-V/Proxmox), and air-gapped.
IT Support
Round-the-clock managed services, monitoring, and incident response. Your operations never sleep, and neither do we.
Years of Experience
Founded in 2012. Over a decade of delivering IT solutions, cybersecurity services, and infrastructure management.
Data Sovereignty
Every product runs on your infrastructure. Your data never leaves your perimeter. No cloud dependency. No vendor lock-in.
We are here to make IT simple. With all-in-one solutions and 24/7 support, we keep things running smoothly so you can focus on growing your business. Whether you need everyday support or a fully managed infrastructure, SinonTech delivers services tailored to your organisation.
We deliver services such as network, application, infrastructure, and security management via ongoing and regular support. By outsourcing IT responsibilities to us, your team reclaims valuable time to focus on core activities.
Learn MoreWe protect infrastructure, networks, and sensitive data across your organisation. From SOC building and incident response to DDoS mitigation, malware defence, and vulnerability management.
Learn MoreWe provide expert advice, guidance, and solutions to clients to help them effectively manage their IT systems. IT strategy and planning, technology evaluation, project management, cloud computing, and compliance advisory.
Learn MoreMost vendors force a choice: surrender your data to their cloud, or go without. SinonTech gives you a third option: full data ownership regardless of where the software runs. Self-host it on your servers, or let us host it for you. Either way, you own 100% of your data and we never access, mine, or sell it.
Whether you deploy on your infrastructure or use our hosted service, you own 100% of the data your platforms produce. We never access, read, mine, sell, or share your data: not for analytics, not for training, not for anything.
You can export, migrate, or delete everything at any time. When an auditor asks who owns your data, the answer is simple: you do.
Your data. Always yours. Full stop.
Every product is designed to be shaped to your organisation. White-label branding, custom workflows, bespoke dashboards, configurable detection rules, role-based learning paths, per-tenant feature toggles. Your clients see your brand, not ours.
This is not a configuration panel with three options. It is a platform you own and adapt to match how your organisation actually operates.
Your brand. Your workflows. Your configuration.
Bare metal, Docker, Kubernetes, cloud VMs (AWS EC2, Azure VMs, GCP Compute), virtual environments (VMware, Hyper-V, Proxmox, KVM), or fully air-gapped. Same features regardless of deployment mode. No feature gating by tier.
Prefer not to manage infrastructure? Let us host it for you. Same software, same features, same data ownership. We just manage the servers. Start small and scale as you grow.
Seven deployment options. Full ownership in every one.
Founded in 2012 by Marcin and Dahema, SinonTech is a Managed Service Provider dedicated to delivering comprehensive IT solutions to businesses of all sizes. What started as an MSP has grown into a company that also builds enterprise-grade, self-hosted security software.
We are here to make IT simple. With all-in-one solutions and around-the-clock support, we keep things running smoothly so you can focus on growing your business. Whether you need a fully managed infrastructure, a service desk, or expert consulting, we deliver what your team needs, when they need it.
We are all about keeping your digital world safe and sound. Strong cybersecurity is not just a nice-to-have. It is a must. Our team consists of highly skilled and certified professionals with years of experience in dealing with cyber threats and incidents. We also build our own security platforms, because we believe the best way to protect data is to keep it under your control.
You focus on driving your business forward, and we handle the technology to keep everything running smoothly in the background. Recognising that every organisation is different, we emphasise collaboration with our clients to understand their specific challenges and objectives. Our approach combines tailored strategy with hands-on execution.
Marcin is a highly skilled Cyber Security professional with extensive hands-on experience. Dahema has a proven track record as a Cyber Intelligence Consultant and leader across multiple industries. Together, they bring technical depth and strategic vision to every engagement.
Trusted by organisations across the United Kingdom for managed IT, cybersecurity, and self-hosted infrastructure.
Insights on cybersecurity, IT management, and self-hosted infrastructure from the SinonTech team.
A Managed Service Provider (MSP) remotely manages a client's IT infrastructure and end-user systems. They offer specialised services like network, application, infrastructure, and security management, typically on a subscription basis. SinonTech operates as an MSP, delivering comprehensive IT support so your team can focus on core business activities rather than managing technology.
By outsourcing IT responsibilities to an MSP, small and medium-sized businesses can recoup valuable time and focus their resources on core activities. An MSP provides access to enterprise-grade expertise, tools, and 24/7 support without the cost of building and maintaining an in-house IT department. You gain predictable costs, reduced risk, and the ability to scale your IT operations as your business grows.
Cybersecurity is the practice of protecting computer systems, networks, and data from theft, damage, or unauthorised access. It is crucial for businesses to safeguard their information and operations against the growing frequency and sophistication of cyber attacks. A single breach can result in financial loss, regulatory penalties, reputational damage, and operational disruption.
We offer a range of cybersecurity services to help guard against Distributed Denial of Service Attacks (DDoS), social engineering and phishing, vulnerabilities, malware, and advanced persistent threats. Our services include SOC building and implementation, incident response (in-house or outsourced), vulnerability management, email security, and security awareness training. We also build self-hosted security platforms (Umbra SIEM, SinonSentinel, UmbraShield, UmbraRisk, and SecureMinds AI) for organisations that want to keep their security data on their own infrastructure.
Yes, we offer around-the-clock monitoring and support to detect and respond to threats in real-time. Our team monitors infrastructure, analyses alerts, and takes immediate action when threats are identified. For organisations building their own SOC, our Umbra SIEM platform provides the tooling for continuous monitoring on self-hosted infrastructure.
Absolutely. We understand that every business is unique, and we tailor our solutions to match your specific requirements. This applies to both our managed services (where we design bespoke security strategies for your environment) and our self-hosted products, where every dashboard, workflow, detection rule, and integration point is fully customisable per client.
Our team consists of highly skilled and certified professionals with years of experience. Founded in 2012, SinonTech has over a decade of hands-on experience in cybersecurity, IT management, and infrastructure operations. Our founders bring deep expertise in cyber security engineering and cyber intelligence consulting across multiple industries.
Our software can run on your own infrastructure or on servers we manage for you. Either way, you own 100% of your data. We never access, read, mine, sell, or share it. You can export, migrate, or delete everything at any time. Full ownership regardless of where the software runs, whether that is your data centre, your cloud, or ours.
SinonTech develops nine self-hosted security products: Umbra SIEM (security operations with 12 enterprise modules and multi-SIEM federation), SinonSentinel (unified MSP and IT security management with 50 features), UmbraShield (application security with SAST, SCA, DAST, and AI copilot), UmbraRisk (threat modelling and risk management with 72 compliance frameworks, SBOM analysis, and AI threat generation), SinonAlert (detection and response with 55 connectors, 24 rule types and 468 starter rules), SinonPosture (cloud security posture management with 30 provider integrations, 1,121 checks and 20 compliance frameworks), SinonFirewall (self-hosted next-generation firewall), VeritasFeed (news and threat-intelligence platform), and SecureMinds AI (security awareness training with 31 courses and phishing simulation). We also build six infrastructure platforms as part of the SOC-in-a-Box suite: SinonAuth (identity and directory), SinonForge (Git), SinonStore (object storage), SinonMeet (unified communications), SinonMail (enterprise mail server), and SinonVPN (VPN and privileged-access bastion): fifteen self-hosted products in total.
All SinonTech products support six deployment modes: bare metal installation on Linux servers, Docker with pre-configured Compose files, Kubernetes via Helm charts, cloud VMs on AWS/Azure/GCP, virtual environments on VMware/Hyper-V/Proxmox, and fully air-gapped offline bundles. Each deployment mode delivers the complete feature set. There is no reduced "lite" version. Umbra SIEM also includes a Standalone Native backend that runs on SQLite with zero external dependencies.
Yes. All five products (Umbra SIEM, SinonSentinel, UmbraShield, UmbraRisk, and SecureMinds AI) are approaching beta. Access is free. We are looking for SOC teams, MSPs, MSSPs, security architects, GRC analysts, and security-conscious organisations of any size who want to evaluate self-hosted alternatives to their current stack. Register on each product page: Umbra, SinonSentinel, UmbraShield, UmbraRisk, or SecureMinds AI.
Offering 24/7 IT support and tailored strategies to keep your business secure, efficient, and ahead of the curve. Whether you need managed services, cybersecurity consulting, or self-hosted security platforms, we are here to help.
Phone